Rights of data subjects
The rights under Chapter III GDPR and the digital rights of the LOPDGDD.
Chapter III of the GDPR confers on data subjects a set of rights the organisation must guarantee and which the DPO helps to operationalise, being also the point of contact. The LOPDGDD adds, in Title X, the digital rights.
| Right | Content | Basis |
|---|---|---|
| Information | To receive clear information about the processing at the time of collection. | Arts. 13–14 |
| Access | To obtain confirmation of and access to the data processed. | Art. 15 |
| Rectification | To rectify inaccurate data and complete incomplete data. | Art. 16 |
| Erasure | To obtain erasure — the right to be forgotten — where applicable. | Art. 17 |
| Restriction | To obtain restriction of processing in the cases provided. | Art. 18 |
| Portability | To receive the data in a structured format and transmit them to another controller. | Art. 20 |
| Objection | To object to processing based on legitimate interest or for direct marketing. | Art. 21 |
| Automated decisions | Not to be subject to decisions based solely on automated processing. | Art. 22 |